Google deps.dev OpenSSF Security Scorecard & Dependency Audit

Overview

Google deps.dev OpenSSF Security Scorecard & Dependency Audit is an MCP server that connects AI assistants to Google Open Source Insights for security analysis. It audits dependency trees and retrieves OpenSSF Security Scorecard data, enabling models to assess package security posture directly within conversations and agent workflows.

This is a hosted remote server — connect your MCP client to https://ceadigital.io/mcp/depsdev with no local installation required. Version v1.0.0 is available now, with no authentication needed to get started.

Listed under Security on mcp.site, the server works with Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed, and all MCP-compatible clients. If you maintain this server for ceadigital.io, claim your listing to earn the Verified badge and keep information up to date.

Installation

Settings → Connectors → Add custom connector
Name: Google deps.dev OpenSSF Security Scorecard & Dependency Audit
URL:  https://ceadigital.io/mcp/depsdev